Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/WiwzbwuyICQ5mH1fGVNnB6PjVvQ.roa
File: WiwzbwuyICQ5mH1fGVNnB6PjVvQ.roa (raw, json)
Hash identifier: 4XBrXpqR7n78FIQP34+gFtnV0b/ucLsaM0NH+QnoSpE=
Subject key identifier: 5A:2C:33:6F:0B:B2:20:24:39:98:7D:5F:19:53:67:07:A3:E3:56:F4
Certificate issuer: /CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
Certificate serial: 01856E6FB35C81E3EDBF330E8E0857F3617C
Authority key identifier: E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/WiwzbwuyICQ5mH1fGVNnB6PjVvQ.roa
Signing time: Sun 01 Jan 2023 17:44:52 +0000
ROA not before: Sun 01 Jan 2023 17:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60257
IP address blocks: 193.56.176.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:b3:5c:81:e3:ed:bf:33:0e:8e:08:57:f3:61:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
Validity
Not Before: Jan 1 17:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a2c336f0bb2202439987d5f19536707a3e356f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:47:4f:ab:33:90:b8:5f:1f:e7:1b:d8:6b:
e1:73:5e:06:2a:aa:b5:77:34:56:4f:70:88:87:f6:
9f:f1:e8:51:b7:23:5e:43:64:99:1a:63:95:e4:fe:
09:f6:44:48:85:0a:4a:f5:9d:1f:de:35:85:75:e4:
63:fa:0a:5d:83:9a:3b:c0:c9:a7:cd:54:75:e7:65:
99:cb:b2:b9:d9:94:1c:fe:6a:13:c1:5d:fd:fe:47:
47:1b:5b:0b:7f:c3:6a:26:e6:2f:42:dd:81:52:41:
7a:db:f1:63:2b:6a:31:17:8e:db:87:d9:46:f4:43:
11:6f:64:c4:17:8a:c7:4b:46:31:bb:de:d7:5d:19:
fd:3a:66:f6:d7:29:dd:8d:2a:0c:51:2b:8a:9e:67:
c4:3f:d8:a4:1b:df:f6:a9:62:8f:05:cf:1b:ea:c6:
13:86:df:0b:4f:c6:94:ed:39:aa:1e:33:72:6b:e9:
17:5e:cc:b4:72:e6:c0:24:26:42:5e:a7:29:61:75:
49:16:e8:86:63:6b:ac:a8:2d:e9:6a:21:f2:34:ce:
90:62:d4:4a:42:b5:25:ad:0f:81:f5:a6:65:68:04:
88:c8:02:bb:f9:3d:54:21:0c:e6:66:08:95:24:08:
b2:75:6b:5b:63:06:48:19:74:63:ef:3e:20:a0:29:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2C:33:6F:0B:B2:20:24:39:98:7D:5F:19:53:67:07:A3:E3:56:F4
X509v3 Authority Key Identifier:
keyid:E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/WiwzbwuyICQ5mH1fGVNnB6PjVvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.176.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:02:1c:bf:7a:9d:09:e1:71:5d:73:c8:c6:d5:39:97:2e:2d:
a3:eb:6e:f9:c9:97:07:f7:3c:c1:da:c0:96:a3:b1:57:37:cd:
bc:53:8b:d9:f4:a9:cc:74:9a:5b:63:4b:d5:86:34:73:d9:0e:
75:9f:96:df:3f:b7:94:b2:a6:b8:fc:4c:0d:e3:da:b3:81:a0:
a3:17:1b:6b:da:0e:54:43:2a:3d:10:c4:c0:a0:5f:30:d8:95:
b8:51:eb:97:10:76:01:32:30:34:d9:b2:e5:e1:06:5a:18:9d:
24:b1:d2:61:1c:97:3f:31:4d:18:0a:c5:02:f4:2f:e4:16:c1:
93:02:95:5e:f5:c4:ea:d0:12:bd:47:c8:ac:26:3a:74:dd:8a:
8f:02:0c:6a:c6:ce:3a:83:3c:7c:08:5a:cc:f8:89:95:a1:3e:
8c:b2:b2:8d:b0:43:74:69:8d:3d:b8:45:71:28:62:51:b6:1d:
a8:5c:26:d9:49:b2:1b:70:92:a8:1e:14:58:d1:b1:db:54:30:
0e:74:82:b7:54:45:a8:27:2a:3a:e3:5b:dc:ac:c5:f2:af:8c:
25:00:91:d7:22:74:81:23:ef:90:ef:fb:ce:39:35:6b:7a:0f:
f6:d3:01:7a:9f:a3:1b:2b:9a:e5:a6:4c:72:f0:ee:09:8f:b4:
91:f7:fd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:32 2024 by rpki-client on console-ams.rpki-client.org